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This listing of claims reflects all claim amendments and replaces all prior 
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the deletion would be difficult to see. 



ING OF CLAIIUIS: 



(Currently amended) A method comprising: 

usin0 a biometric generator to obtain a biometrtc signature of an Individual; 
boncf ing the biometric signature to a data storage device; 
requ ring the biometric signature of the individual to access a data record 
stored on ttlie data storage device; 

controlling an access to the data storage device by using a data consolOp 
the data cohsole being a secure Input/output device; 

mairi|tajning a credibility record associated with the data recor d, whoro i n 
eae h pi e ce [ of data ontcrod in th e data rocord io as s ign e d a crod i bi l ity we i ght 



€ fe d i bility coofficlonts occignod to tho data rocord ; 



assijinlnq a credlbliltv coefBcient to data in the data re cord based on 



an evaluati on of the credibility record, wherein each piece of personal or 



confidentig I data entered in the data storage device Is associated with a 



credibility weight based upon cred ibility coefficients assigned to the data 



record: 



usinc 
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a metadata query to request a disclosure of the data record; and 
allowing the individual to control the disclosure of the data record. 
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a uni 
session 
a 



5. (Orig 
session ope rator 
signature o1 
authorized (hperator 



6. 



(Orig 
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(Original) The method of claim 1 further comprising: 
generating an encryption key based on the biometrio signature of the 
individual; nnd 

usinj) the encryption l<ey to encrypt the data record. 

(One inal) The method of claim 1 further comprising: 
obtaining the biometric signature of a session operator, the session 
operator op|erating the biometric generator; and 

recojding a session history in the credibility record. 

(Qrig|inal} The method of claim 3 wherein the session history comprises: 
que identifier of the biometric generator: the biometric signature of the 
operator; and 
time. 



session 



nal) The method of claim 3 further comprising preventing the 

from operating the biometric generator when the biometric 
the session operator does not match the biometric signature of an 



nal) The method of claim 1 further comprising: 
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obtaining the blometric signature of a console operator, the console 
operator b^lng a person operating the data console; and 
recording an access history In the credibility record. 



7. (Cur 
comprises 



9. (Orig 
comprises 
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ently amended) The method of claim o wherein the access history 



unique identifier of the data console; the blometric signature of the 
conslole operator; an access type; and 
an access time- 
s' (Oris inal) The method of claim 6 further comprising: 

requ ring the console operator to enter an authorization code prior to 
allo\A ing the console operator to access the data record; 
prev<mting the console operator from accessing the data record when the 
cons }le operator does not enter a proper authorization code; and 
storing the authorization code in the credibility record. 



nal) The method of claim 1 wherein using a metadata query further 



evalijating of the data record without disclosing the data record to a 
querying party; and evaluating of the data record without disclosing the 
meta Jata query to the individual. 
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10. 

the disclosljre 



(Orl|{|inal) The method of claim 1 wherein allowing the Individual to control 

of the data record further comprises: 
alloU/Ing the individual to deny a specific data query; 
allov/ing the individual to deny the metadata query; 
allovring the individual to authorize the disclosure of the data record; and 
allovring the individual to authorize a partial disclosure of the data record- 



11. (Original) 
history in the 



Pages of 16 



The method of claim 1 further comprising recording a query 
credibility record. 



12. (Oric inal) The method of claim 1 1 wherein the query history comprises: 
a data query authorization code; 
an Identification of the querying party; 
the inique Identifier of the data console; 
the bjiometric signature of the console operator; and 
a query time. 

13. (PreNfiously presented) The method of claim 1 further comprising; 
assidning a credibility coefficient to the data record based on an evaluation 

of the credlhillty record; 

changing the credibility coefficient when an element in the credibility 
record is cohipromrsed; and 
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senc ing a broadcast notice associated with a change in the credibility 



coefficrent. 



arid 



14. (Cur 
managemept 
a 

Individual 
biometric si 

a da 
belongs to 
signature; 

a 



ently amended) An apparatus for private information access rights 
comprising: 

bidmetric generator to analyze a unique biological characteristic of an 
to generate a biometric signature for the Individual wherein the 
denature is reliably replicable; 
a storage device to store a data record wherein the data record 
he individual and the data storage device is locked by the biometric 



fiersonal o 



19 UvJ^iyrWSTT 'J 

coefficients 
a 

console Is s 
data query 



data 



15, (Prevjlously 
biometric generator 



16. (Prev 



Pages of 15 



crejdibility record associated with the data record, wherein each piece of 
other confidential d ata entered in the data rooord a toraqe device 



associated with a credibility weight based upon credibility 



assigned to data In t he data record; and 
console to control an access to the data record wherein the data 
secure data input/output device and the access comprises one of a 
and a data entry. 



presented) The apparatus of claim 14 further comprising a 
authorization procedure. 



ously presented) The apparatus of claim 15 further comprising a 
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biometric s gnature match for an operator of the biometric generator. 

1 7, (Original) The apparatus of claim 1 4 further comprising a data console 
authorizatictn procedure. 



18. 
code. 



(One inal) The apparatus of claim 1 7 further comprising an authorization 



19. (Orldlnal) 
disclose the 
disclose the 



20. (Cancel 



21. (PreYiously 
record combrlses 



22. (Prev|lously 
record 



The apparatus of claim 14 further comprising an authorization to 
data record wherein the individual controls the authorization to 
data record. 



ed) 



presented) The apparatus of claim 14 wherein the credibility 
a session credibility coefficient. 



presented) The apparatus of claim 14 wherein the credibility 
comprises a biometric operator credibility coefficient. 



23. (Previously presented) The apparatus of claim 14 wherein the credibility 
record comi^rises an access credibility coefficient. 
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24. (Pref^ously 
record 



presented) The apparatus of claim 14 wherein the credibility 
corrfpnses a data console operator credibility coefficient. 



25. (Currently amended) An article of manufacture comprising: a machine- 



ccesslble 



medium including content that, when accessed by a machine, causes 
the machine to: 

gen€ rate a biometric signature of an Individual: 
bone the biometric signature to a data storage device; 
requ re the bbmetric signature of the Individual to access a data record 
stored on tiie data storage device; 

cent ol an access to the data storage device by a data console, wherein 
the data co nsole is a secure input/output device; 

maintain a credibility record associated with the data record, wherein each 
piece of Bi rsonal or other confidential d ata entered in the data record 



storage deyice is a ss i gn e d associated with a credibility weight based upon 



credibility coefficients, assigned to data in t he data record; 

use £1 metadata query to request a disclosure of the data record; and 
allow the individual to control the disclosure of the data record. 



Page 8 of 15 



PAGE11/18'RCVDAT8m75:59:3 



Application Number 10/623,337 
Response Date: August 27, 2007 
Reply to Office Action of June 26, 2007 

PM [Eastern Daylight Time] ' SVR:USPTO-EFX^^^^^ 



Best Available Copy 

OB/21/2001 15:07 FAX 503 459 4142 AHMRT 



■» USPTO General 



ia012/018 



26. (Orl! jinal) The article of manufacture of claim 25 further comprising: a 
machine-a ;cessible medium Including content that, when accessed by a 
machine, c|auses the machine to: generate an encryption l<ey based on the 
biometric signature of the individual; and use the encryption l<ey to 
encrypt the data record. 



27. (Original) 
machine- 
machine, 



28. (Oridinal) 
manufacture 
identifier of [the 
operator; anid 



29. (Orig 
machine-; 
machine, 
by the 
does not 
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The article of manufacture of claim 25 further comprising: a 
a<bcesslble medium including content that, when accessed by a 
c&uses the machine to: 
generate the biometric signature of a session operator, wherein the 
session operator operates the biometric generator and 
reooM a session history in the credibility record. 



The content of the machine-accessible medium of the article of 
of claim 27 wherein the session history comprises: a unique 
biometric generator; the biometric signature of the session 
a session time. 



nal) The article of manufacture of claim 27 further comprising: a 
medium including content that, when accessed by a 
the machine to prevent an operation of the biometric generator 
operator when the biometric signature of the session operator 
mditch the biometric signature of an authorized operator 



accessible i 



causes 



session 
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30. (Ori(|inal) The article of manufacture of claim 25 further comprising: a 
machine-accessible medium Including content that, when accessed by a 
machine, c luses the machine to: 

gen« irate the biometric signature of a console operator, wherein the 
console operator operates the data console; and 

reco 'd an access history In the credibility record. 



31. (Ori£ 
manufacture 

an ufiique 
console operator; 

an 



access 



32. (Orig(inal) 
machine-actcessible 
machine. 



inal) The content of the machine-accessible medium of the article of 
of claim 30 wherein the access history comprises: 

identifier of the data console; the biometric signature of the 
; an access type; and 
time. 



The article of manufacture of claim 30 further comprising: a 

medium including content that, when accessed by a 
the machine to: 

require the console operator to enter an authorization code to access the 



csiusesi 



data record 

prevent an access of the data record when the console operator does not 
enter a prober authorization code; and 

store the authorization code in the credibility record. 
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33. (OriAlnal) The article of manufacture of claim 25 further comprising: a 
machine-accessible medium including content that, when accessed by a 
machine, cpuses the machine to: 

perform an evaluation the data record wherein the data record is not 
disclosed td) a querying party; 

and l^erFomn an evaluation of the data record wherein the metadata query 
is not disclosed to the individual. 



machine-ac cessible 



machine, 
allov^ 
allow 
allow 
and 



causes 1 



35. (Orig 



machine-ac ::esslble 



machine, cc uses 
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34. (Original) The article of manufacture of claim 25 further comprising: a 
medium including content that, when accessed by a 
the machine to: 
the individual to deny a specific data query; 
the individual to deny the metadata query; 
the individual to authorize the disclosure of the data record; 
^llow the individual to authorize a partial disclosure of the data record. 



nal) The article of manufacture of claim 25 further comprising: a 
medium including content that, when accessed by a 
the machine to record a query history in the credibility record. 



36, (Orig nal) The content of the machine-accessible medium of the article of 
manufacture of claim 35 wherein the query history comprises: 
a datfe query authorization code; 
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an Ic entlfication of the querying party; 
the t nique Identifier of the data console; 
the tjiometrlc signature of the console operator; and 
a qufery time. 



37. (Previously 
comprising: 
accessed 



b/ 



assign 



the crediblli y 
Chan 



is compromised 

send 
ooefFlcient 
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presented) The article of manufacture of claim 25 further 
a machine-accessible medium including content that, when 
a machine, causes the machine to: 

a credibility coefficient to the data record based on an evaluation of 
record; 

the credibility coefficient when an element in the credibility record 
; and 

a broadcast notice associated with a change in the credibility 
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